CVE-2018-17568

utils/utrpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption...

CVE-2018-17569

CVE-2018-17569 affects ViaBTC Exchange Server prior to 2018-08-21. Description: an integer overflow in the file network/nw_buf.c leading to memory corruption. Connected records confirm the same root cause and impact; no explicit exploit details or patched remediation are provided within the suppl...

CVE-2018-16793

Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA Outlook Web Access login page...

CVE-2018-16793

CVE-2018-16793 : Concrete details across connected sources show a server-side request forgery (SSRF) in Rollup 18 for Microsoft Exchange Server 2010 SP3 and earlier, exploitable via the username parameter in the OWA login page (/owa/auth/logon.aspx). The underlying issue is a SSRF condition that ...

Microsoft Exchange Server Rollup Server-Side Request Forgery Vulnerability

Microsoft Exchange Server is the United States Microsoft Microsoft a set of e-mail services program, which provides mail access, storage, forwarding, voice mail, mail filtering and screening functions.Rollup is used in one of the code packer. A server-side request forgery vulnerability exists in...

The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges remotely...

Microsoft Exchange Server Memory Corruption Vulnerability

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A memory corruption vulnerability exists in Microsoft Exchange Server that stems from the program failing to properly handle...

CVE-2018-8374

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-8374

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-8302

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server...

Spoofing

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-8374

CVE-2018-8374 is a tampering vulnerability in Microsoft Exchange Server related to how profile data is processed. Public sources in the connected set indicate impact on Microsoft Exchange Server 2016 CU9 and CU10, where an attacker who authenticates could modify a targeted user’s profile data by ...

Microsoft Exchange Server Tampering Security Bypass Vulnerability

Microsoft Exchange Server 2016 is a suite of email service programs from Microsoft USA, which provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. A tamper security bypass vulnerability exists in Microsoft Exchange Server 2016 Cumulative Update...

Patch Tuesday: Microsoft Addresses Two Zero-Days in 60-Flaw Roundup

Microsoft has rolled out its August Patch Tuesday fixes, addressing 19 critical vulnerabilities, including fixes for two zero-day vulnerabilities that are under active attack. Overall, the company patched a total of 60 flaws, spanning Microsoft Windows, Edge, Internet Explorer IE, Office, .NET...

Microsoft Releases Patches for 60 Flaws—Two Under Active Attack

Get your update caps on. Just a few minutes ago Microsoft released its latest monthly Patch Tuesday update for August 2018, patching a total of 60 vulnerabilities, of which 19 are rated as critical. The updates patch flaws in Microsoft Windows, Edge Browser, Internet Explorer, Office, ChakraCore,...

Microsoft Exchange Server Tampering Vulnerability

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...

Update Rollup 23 for Exchange Server 2010 Service Pack 3

Update Rollup 23 for Exchange Server 2010 Service Pack 3 Summary This update rollup is a security update. This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE:Microsoft Common...

Description of the security update for Microsoft Exchange Server 2013 and 2016: August 14, 2018

Description of the security update for Microsoft Exchange Server 2013 and 2016: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: Microsoft Common...

Microsoft Exchange Server Voicemail Transcription Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the conversion of voicemails to text. Due to improper access control, an attacker who h...

KLA11302 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code and bypass security restrictions. Below is a complete list of vulnerabilities: 1. An tampering vulnerability can be exploited via specially crafted...